f857855debc6f13f85f41b0284c31e05998c2298b300cc367b14314db64e147a | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f857855debc6f13f85f41b0284c31e05998c2298b300cc367b14314db64e147a
Size

120KB
MD5

45ac0c268780c26a56ebe68a8cf4c957
SHA1

5d61f8472e047f12cab61402b2f43fe5f80e17e7
SHA256

f857855debc6f13f85f41b0284c31e05998c2298b300cc367b14314db64e147a
SHA512

60ce97d304dd7cd1441ffd803a10f6400b0234df70f4463a6b45e5d624915d8ad6cb0af5d2dec2120867bdf4c8ac3f866d324697df4bb2e80acd23a10c596fe8
SSDEEP

1536:fbnxNh4CasN0YJo2mi3FpV/bcHCMEj5KeJjVm7VRPP4wfVCcPr93AWLJ9YrK:7na60aQWFpWi/5K2OjPP4wf9r9QWLQr

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f857855debc6f13f85f41b0284c31e05998c2298b300cc367b14314db64e147a

Files

f857855debc6f13f85f41b0284c31e05998c2298b300cc367b14314db64e147a
.dll windows:4 windows x86 arch:x86

0f44bf2b3b0b8d5ecae5689ff1d0e90d

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

CreateProcessA
CloseHandle
WriteFile
CreateFileA
GetTickCount
lstrcpyA
lstrcatA
lstrlenA
GetTempPathA
SetErrorMode

user32

wsprintfA

Sections

.text
Size: 119KB - Virtual size: 118KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 376B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ